com php-src: add CVEs: NEWS
| From: | Stanislav Malyshev | Date: | Fri, 20 Mar 2015 05:54:48 +0000 |
| Subject: | com php-src: add CVEs: NEWS | ||
| Groups: | php.cvs | ||
| Request: | Send a blank email to php-cvs+get-85659@lists.php.net to get a copy of this message | ||
Commit: 95b9c34f0222e02d83f837555c7198948a6732fb
Author: Stanislav Malyshev <stas@php.net> Thu, 19 Mar 2015 22:53:29 -0700
Parents: 51856a76f87ecb24fe1385342be43610fb6c86e4
Branches: PHP-5.4 PHP-5.5 PHP-5.6 master
Link: http://git.php.net/?p=php-src.git;a=commitdiff;h=95b9c34f0222e02d83f837555c7198948a6732fb
Log:
add CVEs
Changed paths:
M NEWS
Diff:
diff --git a/NEWS b/NEWS
index ea3af2a..715227e 100644
--- a/NEWS
+++ b/NEWS
@@ -2,16 +2,22 @@ PHP NEWS
|||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
?? ??? 2015 PHP 5.4.40
+- SOAP:
+ . Fixed bug #69152 (Type Confusion Infoleak Vulnerability in unserialize()
+ with SoapFault). (Dmitry)
+
19 Mar 2015 PHP 5.4.39
- Core:
- . Fixed bug #68976 (Use After Free Vulnerability in unserialize()). (Stas)
+ . Fixed bug #68976 (Use After Free Vulnerability in unserialize())
+ (CVE-2015-0231). (Stas)
. Fixed bug #69134 (Per Directory Values overrides PHP_INI_SYSTEM
configuration options). (Anatol Belski)
. Fixed bug #69207 (move_uploaded_file allows nulls in path). (Stas)
- Ereg:
- . Fixed bug #69248 (heap overflow vulnerability in regcomp.c). (Stas)
+ . Fixed bug #69248 (heap overflow vulnerability in regcomp.c) (CVE-2015-2305).
+ (Stas)
- SOAP:
. Fixed bug #69085 (SoapClient's __call() type confusion through
@@ -19,7 +25,7 @@ PHP NEWS
- ZIP:
. Fixed bug #69253 (ZIP Integer Overflow leads to writing past heap
- boundary). (Stas)
+ boundary) (CVE-2015-2331). (Stas)
19 Feb 2015 PHP 5.4.38